如何正确的删除传奇3复制装备的SQL漏洞
如何正确的删除传奇3复制装备的SQL漏洞说明：
SQL脚本如下所示，请复制到SQL查询分析器中执行即可，建议做完备份再做些类的操作！如果你用的是GAME1数据库，请查找所有的GAME，改成GAME1，就可以了！
if exists (select * from dbo.sysobjects where id = object_id(N'.') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
drop table .
CREATE TABLE .
(
(15) COLLATE Chinese_PRC_CI_AS NOT NULL ,
NULL ,
NOT NULL ,
(30) NOT NULL ,
NOT NULL ,
(10) COLLATE Chinese_PRC_CI_AS NULL
)
ON
--首先删除玩家刚摘下来的装备，就是TBL_ITEM表中，FLD_INDEX=0的那些装备
DELETE FROM .. WHERE = 0
--从玩家身上/包袱获取数据
INSERT INTO ..(, , ,,,)
SELECT , , , LTRIM(STR())+LTRIM(STR()) AS FLD_TID,,'身上' AS Place
FROM ..
--从仓库获取数据
INSERT INTO ..(, , ,,,)
SELECT , , , LTRIM(STR())+LTRIM(STR()) AS FLD_TID,,'仓库' AS Place
FROM ..
--从寄售获取数据
INSERT INTO ..(, , ,,,)
SELECT , , , LTRIM(STR())+LTRIM(STR()) AS FLD_TID,,'寄售' AS Place
FROM ..
--记录将要删除的复制装备
if not exists (select * from dbo.sysobjects where id = object_id(N'..') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
CREATE TABLE .. (
[删除日期] datetime not null,
NOT NULL ,
[角色名] (15) COLLATE Chinese_PRC_CI_AS NOT NULL ,
[装备代码] NULL ,
[存放地点] (10) COLLATE Chinese_PRC_CI_AS NULL
) ON
INSERT INTO ..([删除日期],,[装备代码],[角色名],[存放地点])--,[装备名称]
SELECT getdate() as 删除日期, , -1 AS 装备代码, AS 角色名, AS 存放地点--, AS 装备名称
FROM ..
WHERE ((() In
(SELECT FROM As Tmp GROUP BY HAVING Count()>1 )))
ORDER BY
--遂个删除复制装备
DECLARE @T_ID char (30),@I_MAKEINDEX int , @V_Place varchar (10)
DECLARE D_ITEMS_cursor CURSOR FOR
SELECT ,,
FROM ..
WHERE ((() In
(SELECT FROM As Tmp GROUP BY
HAVING Count()>1 )))
ORDER BY
OPEN D_ITEMS_cursor
FETCH NEXT FROM D_ITEMS_cursor INTO @T_ID,@I_MAKEINDEX,@V_Place
WHILE @@FETCH_STATUS = 0
BEGIN
BEGIN
IF @V_Place = '仓库'
DELETE FROM .. WHERE = @I_MAKEINDEX
ELSE IF @V_Place = '身上'
DELETE FROM .. WHERE = @I_MAKEINDEX
ELSE
DELETE FROM .. WHERE = @I_MAKEINDEX
END
FETCH NEXT FROM D_ITEMS_cursor INTO @T_ID,@I_MAKEINDEX,@V_Place
END
CLOSE D_ITEMS_cursor
DEALLOCATE D_ITEMS_cursor
if exists (select * from dbo.sysobjects where id = object_id(N'.') and OBJECTPROPERTY(id, N'IsUserTable') = 1)
drop table .
积分任务
页:
[1]